add permissions to pypi and test-pypi runners (#181)

Author: RHammond2

.github/workflows/publish-to-pypi.yml

@@ -13,6 +13,8 @@ jobs:
     # Upload to PyPI on every published release
     if: github.event.action == 'published'
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
 
     steps:
       - uses: actions/checkout@v4

.github/workflows/publish-to-test-pypi.yml

@@ -14,6 +14,8 @@ jobs:
     environment: release
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
 
     steps:
       - uses: actions/checkout@v4